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GraFORTH combines sophtstlcated graphics 
features with a powerful programming language. 
Much more than a utility program, GraFORTH 's 
superior graphics make It the ultimate language for 
entertainment and educational software creation. 
Included are plotting and llnegraphtos, text display 
and character image graphics, and high speed 
3-D graphics, all with a variety of colors and drawing 
options. GraFORTH can tw used on a 48K Apple ][ 
system with DOS 3.3and one disk drive. A16K 
memory card is a useful option. 

neLmguage- 

GraFORTH Is a graphics language similar In 
structure to FORTH, but entirely rewritten for ease 
of use and maximum speed. (Counting to 30,000 in 
GraFORTH takes less than three seconds!) Im- 
mediate commands and programs can be entered 
and run directly from the keyboard. GraFORTH 
Includes a fuil set of arithmetic and string handling 
capabilities. Since standard DOS files are used, 
communication with other programs and languages 
is straightforward. 

Plotting 

md Une GrapNcs: 

The first level of graphics consists of plotting points, 
drawing iines, and filling areas in any of the Apple's 
high-resolution colors. Lines are drawn much faster 
than in Basic, and colored lines are never broken. 
Lines and areas can also be neatly erased from the 
screen without disturbing other Images. Turtle- 
graphics are Inciuded to draw line shapes rapidly 
at any angle. 

'^tDlsfOay 

and Character Gfaphks: 

GraFORTH displays both upper and lowercase 
characters. You can use any of the five character 
sets provided, or create your own with the character 
editor. Character shapes may be combined to form a 



single multi-character image, then "block printed' 
at high speed anywhere on the Apple screen. 
Characters and character shapes can be drawn in 
color up to S times ttwir normal size. 

Three-iXnwnslon^ 
Graphics: 

GraFORTH can also draw three-dimensional color 
images at speeds that make animation possit>to) 
Up to sixteen 3-D objects can be manipulated 
simultaneously. Images can be rotated, sc^ed, 
translated, and positioned, with or without per- 
spective. The supplied image editor allows you to 
create your own 3-D images. Colors may be specified 
as an Image is created, or selected whan ttie image 
is drawn. 



MUSfc: 



GraFORTH Includes a sophisticated software- 
based music synthesizer for adding music or sound 
effects to your programs. Music can be played in any 
one of several Instrument voices. 



TheSystem: 



Programs written in GraFORTH can t>e saved to 
disk as complete stand-alone systems that do not 
require any additional software to run. This makes 
GraFORTH the ideal language for developing games 
and other graphics software. 



ThePacHage- 



GraFORTH Is supplied on a diskette with a special 
version of IX)S 3.3 that loads into a language card 
(if present), freeing up more memory for your 
programs. The disk Includes many sample image 
files, utilities, and complete demonstration programs 
detaiiing the features of GraFORTH. Included with 
the disk is a 200-plus page tutorial explaining the 
Ins and outs of GraFORTH. No previous program- 
ming experience is necessary to use GraFORTH. 
Order GraFORTH from Computer Hideout todayl 



COMPUTER HIDEOUT 

INTELLIGENT PRODUCTS FOR MICROCOMPUTERS 



$64.95 



TfUHS: We Accept M.C. ot WSA (kidicate Card * and 
Expiration Dvtc) Pcrsortal Checks - Allow 3 vwcks to 
clear. Please Enclose tS.OO for Postasc and Handling. 
Louisiana Residents - Please Add <% Sales Tax. 



(318)942-9446 
P. O. Box S64 / Opclousas, Louisiana 70570 
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IMPORTANT AN)40UKCE»£NTS 



Due to a st-rortacje of peqjle 
and comixiters... 

Starting with issue #4, the 
HARDCORE Program i.ibcarv wiil be 
selling prolans ty the liisue or 
TOiume' instead of by individual 
progr am. 

This twians th«it, like NISBi.F, 
eac:h iss'je will ha^e its o^tn disk 
of proqraTs. 

Ifi this way, wt car; maiiitain a 
low oyeri-iead and keep the frices 
to QLr readers low. 

So Vras IS the last chance for 
you to order iridivirkial progr.aitis. 



The srtilunies will be: 

Disk control iJBM 

(DiskFdit S DiskUieH) 

Issue H2 ilB.m 

(ftrtist's ts»se.'(, Araber 's T?, Text 
Tnwada-s. Relief H-ipper 1 

Issue Hi JiS.00 

tnap Editor. Zyohvr Uars, M.erKj, 
I.O.B,. hVperOter 



Subscriptions 



U.S.A ,,.. .52© 

Canada S29 

Mexico S32 

S. America .,,...,,-,....... .S38 

all others S42 

All foreign subscriptions must be in 
U,S, funds and prepaid. No credit 
cards, yet. 

DOMESTIC DEALER RATES sent upon 
request, or call (2(B6) 531-1684. 

UPDATES will focus on the subject of 
Softkeys, "How to make backup copies 
of so-called uncopyoble diskettes." 
Updates ore available only to sub- 
scribers and ore not sold In stores. 

If HardCore Is not published on sche- 
dule, your subscription will still be for 4 
Issues and 4 updates regardless of the 
time it takes to fuKill that order. 



CoiTBUte- Hi{teoi.!t mside Cvwer. 10 

Syffijati'iet ir. Sijf tware J 

levis Rarn.h i shoreliff Systn:ri£ 14 



DOUBLE 
your 

DISKETTES 

The only reasons your Apple J[ 
cannot use the back side of your 
diskette are: 

1. There is no notch. 

2. The diskette manufacturer did 
not test the back side, or worse, 
put the flawed front to the back. 

A nibbling too) will sofve problem 
number 1. 

DISK PREP will solve problem 
number 2. 

DISK PREP formats and tests your 
disk. Sectors with flaws are left so 
that they cannot be used. Your disk 
is left ready to boot, complete with a 
flaw report program saved on it. 

$25.00 

sympathetic software 

9531 Telfian Drive 

Huntington Beach, CA 92646 

California residents add 
$1.50 sales tax 

Dealer inquiries invited 
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The Gravity CsTtnon can be made 
to appear anywtiere on tine city 
scape: atop intact buildings, 
in XJne streets, amid burning 
rubble of blasted buildings 
and within the molten craters. 
(But shooting from such a 
crater will cause the carrrm 
to melt down. 
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Requirenents: 

Back-i^) copy of Hie Ultiie disk 

A copy of rlUFFIH 

One blank disk 

DiskUieH or other nibbler 

ft nuiBber of siiascribers hawe wit- 
ten asking for examples on how to use 
data stateraents in the lOB progran. 

Here is a st^-bw-step proceare 
using the program ''Ultima^'. 

1. Hake a chart siailiar to the one 
shown below. Allow room for tracks 3 
to 34. 

figure 1 



By Bobby 



! ! ftWR 

!TRK! Al ft2 



I 

!3 

M 

!5 
!etc 



-i- 

DD ! M 
! 
I 

1 



A3 
F7 



ta 



DATA 
Dl D2 

IF i «l ! FD ! 

! I ! 

! ! 1 

! ! ! 



2. Mi DiskUiew. Insert the UHims 
disk then REM! track 3 and locate the 
addre^ss and data (narks. These can be 
found fc^' looking for large groLps of 
identical bytes, (see figure 2) When 
yaj hai^ found the correct bytes fill 
in thie chart for track 3. 



figure 2 



FF FF FF FF FF FF FF FF FF FF FF FF 
FF 



DO m F7 



FF FE AB AB tf (« FB FE 



FE FE FE FE FE FE FE FE FE F£ FE FE 


FE FE FE 


DF AAFD 


AE DA EF DA FD ffi 


ffi AF FF 


BF EF DB 


DB AB EF ED AE EB 



3. Repeat step 2 for each track froB 
3 to 34. 

4. The norrsal add-ess and data narks 
used by DOS are: 

D6 Aft % / D5 AA Afl 16-sector 
D5 AA 65 / DS tfi AD Bisector 
Read track and co«ipare these narks 
Mith i*iat you find on the disk to 
determine whether the disk is 13 or 
1& sector. You should find that the 
disk is 13- sector. 

5. Coiipare the i3-sectbr isarks with 
the bytes in your chart. Addi^ess 
r&ark A2 and data nark D2 are the sms 
as their 13-sector counterparts. This 



means that we can delete then froa 
or chart. That leaves two add^-ess 
narks and two darta narks. 

6. Use the Byte Conversion Chart in 
Update 2.1 (or a hex/dec converter) 
to convert the tyle values in your 
chart into declital nuibers. 

7. LOAD the lOB proqra* and enter the 
nurtiers into data statements starting 
with line nxter 63050, Maintain the 
order of ftUA3,Dl,D3 as you enter the 
decinal nunbers. 

8. Enter or change the folloHinq 
lines: ^ 

»> Set buffer start to $3000 <« 

50 POKE BUF,4e : POKE CMD,CD : POKE 
TRK.TK : POKE SCT.ST : TOKE DRU, 
py : POKE yOL.U. : RETURN 

>» Read the MTA (« 

60 R&a)Al,A2,Dl,D2 

>» POKE DATA into ftJTS <« 

70 POKE 6;74,A1 : POKE 5795,A2 : 
POKE 6664,01 : POKE 6685,02 : 
(^TURN 

>» Set 13-sector and no chksun (« 

llfl DOS = 12 : POKE 6755,24 

)» MT target disk (« 

120 [W = 2 : CD = IN : GOaS 50 

>» Copy only 32 ^acks <« 

1000 FOR TK = 3 TO 34 

>» Read witii 13-sector RMTS <« 

1010 DM = 1 : CD = RD : 10 = 797 : 
GOSlffl 50 : GOa^^ : GOSUB 80 

>» Check for UTOC (« 

1015 IF TK = 17 THEN POKE 12289,^ 
: POKE 12290,4 

>» W'ite with 16-sector f?HTS <<< 

1020 Dy = 2 : CD = WR : ID = 766 
: GOSUB 50 : GOSUB 80 



)» ML siJroutine «( 

63000 FOR X = 768 TO 813 : READ A 
: POKE X,A : hEXT 

63010 DATA 169,3,160,8,32,217,3,96,1 
,96,1,0,0,0,25,3,0.32,0,0,1,0, 
0.%,l,0,l,2J9,2i6, 169,3,60,8, 
9,128,32,0,30,176,3,40,24,9^, 
40,56,% 

>» a.OAD 13-sector RMTS (« 

63035 PRINT DW M) "BLOW RW" 

>» Address and Data Dark info «< 

63050 DATA 221,247,223,253,223,245, 

223,189,221,245,221.253,223, 

247,221,237 
63860 DATA 223,183,221,253.223,245, 
, 223,253,223,245,221,237,^3, 

183,223,253 
63070 DATA 223,247,221,253,223,247, 

223,253,223,245,221,253.223, 

245,215 253 
63080 DATA 223,247,223,253,221,245, 

223,237,223,183,215,253,223, 

245,223,237 
63090 DATA 221,247,223,237,221,247, 

223,189,223,247,215,237,221, 

247,215,253 
63180 DATA 221,247,215,237,223,247, 

223,253,223,245,215,237,223, 

247 215 253 
63118 OATA 223,247,221,253,223,247, 

223,237.223,245,215.253,221, 

245,223,253 
63120 DATA 223,247.215,253,223,247, 

223,253,221,247.221,237,223, 

183,223,253 

9. Delete line ruMbers 65, 90, vtd 
140. They are not required for our 
purposes. 

Ifl. SAWE This version of lOB under a 

different name. (IE. COPY ULTIMA) 

11. SLOffl) MUFFBJ from your naster 
disk. 

12. 8SAUE the 13 sector RWTS image 
for use by the lOB. 

BSWE RU, A$1900, L$800 

The changes and additions to the 
lOB are to customize it for this 
aM3lication. Let's take a look at 
what we have done. 

Line 50 moves the buffer up to 
allow room for the 13-sector RUTS. 

Continued On Page 15 
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REQUIREMENTS: 



48K AII+ with Applesoft in Rm 
lOB progrm from issue 3 

One of the simplest ways to unlock 
a "protected" cfiskette is to use tSie 
Infxit/Outaijt Block . Howe\«r- , tlie lOE 
progran require;; two disk ci'ivs-.. 3rd 
seme people ("eye only I'jne, 

Here is a modification for lOB that 
requires only one disk drive, 

lOB nonfoUy reads one track at a 
time into ffiemory and then copies it 
to the target disk. A single d'lve 
copy would entail exchanqing disks 34 
times iDefore a copy was done (once 
for each track). This nwdification 
will alloH nore tracks to be read 
WTto (wemory at one time and rediice 
the nutter of disk sHaps. 

Either or both chanqes can be made 
to the 106 program. They are not 
dependant ujjon eadi other. 



COHUERTING JOS FOR SB<GL£ DISK DRE£ 

1) Orange the d-ive nuitoer in line 
120 to 1. 

120 W. = PEEK (OW.):IW = 1:CD = IN: 
GOSUB60 

2) Change the prompt at line 130. 

130 A$ = "INSERT BU«K DISK IN DRBJE 
1.": GOaJB 40: CALL 10 

3) Change whichever control routine 
you are using to prompt for disk 
SMapping, Lines 1002 and 1012 were 
chosen because they did not interfere 
with soMie of the mods made to the 
controller (such as mods for unlock- 
ing Castle Uolfenstein), 

W82 AS = "INSERT SOUffiE DISK": VTAB 
12: GOSUe 30: G0SU8 40 

1012 AS = "INSERT TARGET DISK"; V\m 
12: GOSUB 30: GOSUe 40 

4) Line 1020 in the controller must 
be changed so that drive one is 
called. 

1020 DU = 1: CD = !«: GOaJB 50: GOSUB 
90: GOSUB B0 

(The actual foriat of line 1020 may 
change, but always make DM = 1 if you 
use a single disK drive) 



By Robb Canfield 



5) SAIE this new version. 
SAUE lOB. SINGLE 

mmti HORE TRACKS HITH 106 

1) Change «ie LOfSM In line 10 to 
give us MOre room. 

10 TEXT: HOME: LOIiei:37120: GOSUB 
63000: GOTO 100 

The next st^ d^sends on t*tich con- 
troller you are usirq; 

If the controller has a loop from 
to 34, use CHANGE L 

If your loop goes from 3 to 34, use 

The changes reflect the ability to 
divide the loop evenlv. The maxiifMR 
nunter of tracks whicn can be read 
into aemory is ? (ie. 3 to 34 is 32 
tracks and the largest nunber that 
divides evenly into 32 that is 7 or 
less is 4, so we use a loop of four 
tracks.) 
CHANGE 1 

1) Oiange the loop variable in line 

ma. 

md FOR LO = TO 34 STEP 7 

2) Oiange line 80 to read 7 tracks 
at a time. 

60 FOR TK = LO TO LO + 6: POKE 
T1?K,TK; FOR ST = TO DOS: POKE 
XT, ST: GOSUB 2S: CALL 10: POKE 
WF, PEEK (BUF) + 1: (CXT : NEXT 
: RETURN 

3) Change line 85 to also read 7 
tracks. 

85 FOR TK = LO TO LO + 6: POKE TRK, 
TK: FCfi ST = TO DOS • 2 STEP 2 
: POKE SCT,ST: GOSUB 20: CAU 10: 
POKE BUF, PEEK (BUF) + 1: NEXT : 
mt.1 : f^TURN 

4) Save yoir new lOB. 
SAWE IOB+7 

CWWGE 2 

1) Change the loop variable in line 
1000. 



1000 FOR LO = 3 TO 34 STEP 4 

2) Change line 60 to read 4 tracks 
at a tiAe. 

80 FOR TK = LO TO LO + 3: POKE TRK, 
TK; FOR ST = TO DOS: POKE 3CT, 
ST: GOSUB 20: CfU 10: POKE &ff, 
PEEK (BIF) + 1: NEXT : NEXT : 
RETURN 

3) Change line 85 to also read 4 
tracks. 

85 FOR TK = LO TO LO + 3: POKE TRK, 
TK: FOR ST = TO DOS • 2 STEP 2 
: POKE SCT,ST: GOSUB ^; CALL 10: 
POKE HJF. PEEK (ftF) t 1: fCXT : 
NEXT : RETURN 



4) Save your new lOB. 
SWE JOBM 




U» 



When night falla, the alien 
invaders drip down from the 
stars, oozing back \^ into the 
sky when day returns. Some, 
depleted of energy, oo;e away 
in the midst of battle. Each 
UFO is different in shape and 
color from any of the others. 
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Requirements: 

Knowledge of jf^.hine lanqudtje 
481'. fill with Intei^cnr card 
Multi-Oisk. Csl<ii(J9 bfj Sensible 

Initialize!:) blar-k disk with HtlLO 
prolan deleted. 



If you have a little knowledge of 
machine languaqe prograrnning, and a 
good neasure of perseverance, this 
article will describe a method of de- 
feating the locking scheme used in 3 
large group of programs and let vou 
capture them on standard DOS. These 
are the kinds of prograifts that boot 
and run wiWi no sii:)sec|uetTt disk 
access. Most ganes and many utility 
and business pro-ams fall into ^is 
category, 

M THEORY 

The basis for this approach is: NO 
HATTER IWT LOCKING ^ME IS USED 
THE PROGRAM MUST BOOT ON fi STANDARD 
fm.E IN (M)ER TO RLW. 

If we could somehow step through 
the Boot process, get everything 
loaded, and then stop just prior to 
going to the start of the program. Me 
would be able to sawe the whole thing 
and run it under standard DOS. 

The APPLE Boot process starts with 
Boot in the Di^ Controller ROH. 
This short machine language prografli 
BLOADS track B, sector (containing 
Boot 1 of the di^ being booted) at 
locations $6^3 Wru $8FF, and then 
junps to S80i to execute Boot 1. 

Boot 1 reads Boot 2, end the pro- 
cess continues through successive 
Boot stages intil finally the main 
program is loaded and riri. 

Assuming your disk controller card 
is in slot 6, the code for Boot 
starts at $C600 and extends through 
$C6FA. If you power up your APPLE, 
enter the monitor and do a "C600L", 
the beginning of the disasse»tily 
listing of Boot can be seen. If you 
type a few more L's, you will be aole 
to see the jump to Boot 1 at St^S. 

What we need to do is execute Boot 
0, but stop before Jumping to Boot i. 

How is this done? 

^T 

The RESET routine is at SFF59 in 
the monitor ROH, It performs a func- 

'mi ' 'I 



By Mycroft 



tion similar to pushing the RESET 
button. If called, a feSET cycle is 
performed and any executing program 
Hill be stopped. 

If we could somehow get Boot to 
junp to $FF59 instead of $^1, we 
will have accomplished otr first 
objective. 

MODIFYING BOOT 8 

But since 6X)t is m ROM. it c^- 
not be directiy ntodified. '''he solu- 
tion is to move it to RAH, using the 
monitor's Memory Move routiiie, so we 
can ch.yige it to suit r.xjr needs. 

The new Itxatlfjn s^jjuld be soine- 
wt^ere in RAM wliere it will not be 
overwritten in an'^ of the sticcessive 
Boot stages. 

flemory'that is just below DOS is 
usually safe to use, since many 
locked programs use only slightly 
isodified versions of normal DOS, 

Becatse of the routine in Boot 
that finds the slot the Disk Control- 
ler is in, the second digit of the 
adi-ess we move Boot to must be the 
saise as the slot nunber. 

Let's use $%00-$%FF. 

THE FIRST STEP 

From the monitor , t^: 

96fl0<C600X6Fni 

to move Boot and, instead of jump- 
ing to $801 at the end, have it jump 
to RESET by entering: 

9tf8:4C 59 FF 

Remember to press the RETLRN key 
after each line is entered. 

Mow put a program disk in dr ive 1 
and execute the modified Boot by 
typing: 

%00G 

The d^ive will start, and in 3 
second or two you should hear a beep 
and see the monitor prompt on the 
screen. But the drive is still gin- 
ning, you say? You can turn it off 
by t>^ing: 

C0E8 



Now you can have a Iccrft at Boot 1 
by listing from S801 to see what it 
does, 
801L 

This process can be repeated for 
each successive stage in the Boot 
process, tfrienever there is a juep 
out to a new code section, put in 
good old C 59 FF {JUT to RESET) to 
stop it there. You can examine this 
code at your leisure. 

Don't worry too much about what the 
code is doiriq^at this point. Look 
mainly for JnP's out. 

ft fWCni^L EXAfFlE 

Let's walk through an actual exam- 
ple, from start to finish, of unlock- 
ing a protected program using this 
jnethod. 

To illustrate the procedure, I will 
use the program "Multi-Di^ Catalog 
III", by Sensible Software. Even 
Plough this program has been around 
for a while, it is an excellent and 
very useful utility (which I recom- 
mend that you purchase and add to 
your l^ary. ) 

I have examined dozens of other 
prografts which use a virUtally ideri- 
tical boot sequence, and they can be 
unlocked using this same tecrnique 
with only a few changes (try one of 
your own once-load programs if you 
don't have MultHlisk Catalog). 

Have an initialized slave diskette 
ready and make sure there is a Hrite- 
protect tab on the disk you are 
trying to mlock. 
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Turn on your APPLE with the disk 
*-ive empty, and pu^ RESET to stop 
the drive. This will keep the APPLE'S 
memory clear. 

Now insert the locked disk and get 
into the monitor with a CALL-151, 

Type: 



%00(C600.C6FFM 



to move Boot 0. 
by typing: 

%FA:98 



Then fix the JF out 
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This clwoes the J1P art to S^Mi 
Hhere, in the next st^. He will be 
Bovinq Boot L 

At $9801 type: 

50 Me can stop the Boot. 
NoH t^: 

%00G 

After the beep, type: 

C0E8 

to tirn off the ci"ive, 

BOOT 1 



Look at Boot 1 by typing: 
8011. 

This code relocates itself to 
memory page two, loads Boot 2, and 
finally Kinps out to $301 at $841. 

hove this code (so it can be modi- 
fied) by typing: 

9800<800.8FFM 

Fix the Junp out to go to $9301 by 
typing: 

9843:93 

Step it at that point with:" 

9301:4C 59 FF 

One other byte in Boot 1 must be 
changed so that our loodif ied code is 
executed properly, and that is done 
as follows: 

98ffi:9e 

NoH do a "96006" once again, and 
type "C0E8" to stop the *-ive. 

BOOT 2 

The next stage of the Boot normally 
starts at $30L rkwe this code by 
typing: 

9300<:ffl6.3FFH 

Take a look at the disasse*Bbled 
listirpg of the code beqinninq at 
$9301. 

The Jf out of this stage can be 
seen at $9343, but it is disguised by 



being an indirect JMP through page 
location $3E. 

If you exasiine the code in this 
Boot stage beginning at $93iF, you 
will find that this indirect jump is 
used repeatedly to go to $250, but 
ultimately the indirect jump address 
is obliged to go to the next Boot 
stage. This change occirs at $933A- 
$9341. 

The final junp is determined bythe 
twte stored in memory location $3CC, 
which the program irKrements b^ 1 
before executing the final indirect 
jump. 

If you look at byte $3pC 

$3CC 

you will find that it contains value 
$36 (other prog-ams coianoniy use $B6 
here). This is the high byte of the 
jutp-to adc^ess (the low byte has 
walue $00). 

The proarsm increments this value 
by 1, so {he final JfP add-ess is 
to $3780. 

tJhat we want to do is let the Boot 
do ail the jumps when it is going to 
$25D. but stop it before it makes the 
final junp out to $3700. 

HANOaNc; THE M)IRECT Mf 



BOOT 3 



He can t*-ite a sfwrt subroutine to 
handle the indirect junp far us. 

Because zero page location $3E con- 
tains the value $5D for all the in- 
direct jumps exc^t the final one, 
our subroutine merely needs to see if 
this value changes and, if so, stop 
the boot. Enttr: 

9ffi)g:fl9 5D C5 K Da 03 4C 5D 
9008:02 4C 59 C 59 FF 

The scurce code for this routine 
Hcxjld io«* iil^e; 

9000-A9 5D LDA tt$5D Load value. 

9002-C5 3E (>F $3£ Same? 

^04-D0 83 KC $9009 No, qo RESET 

9006-4C 5D 02 Jf $0250 Yes, qo on. 

9009-C 59 FF JMP $FF59 Jiiip RESET, 

Change the boot code to jump to 
this sutroutine by typing: 

9343 :4C 00 90 

and do another: 

9600G 



fit the beep, you can stop the driwe 
(C0E9J, and exa(ri:'>e tl'ie code S>3g in- 
ning 3l 3S7fSt looking for the next 
jump out. It is at 13747, :«-id is a 
jumti to 41B03. 

' So, as before, change this j'jiip by 
typing: 



3747:4): 59 FF 



WRITING TO THE ROM 



New for the sneaky part. Ttre code 
we moved to memory page $93 ($9300) 
was responsible for reading this por- 
tion of the Boot. But since we just 
made a change at $3747, we don't Hart 
it to be overwritten rfien we start 
the Boot over again, 

ttiat we do is change byte $93ti:, so 
that a dummy write is done by letting 
it "write" to the ROM! 




CD 



03 



X-bombs descend Lpon the city, 
destroying the buildings. They 
cto mofe liamage by intercepting 
your gravity cannors ra'/s, 
oelaying the the destritction 
of the UFOs, lettirig them use 
tlieir iJeathrays kilich atomize 
the buildings tfey strike. 
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This is acconpli^ied by t^ing: 

93CC:De 

and aiso changing bytes $9315 and 
S933E to refwence this location in- 
stead of $3CC. 
Type; 

9315:93 
933E:99 

to accomplish this feat. 

l>ie "write" of the next Boot stage 
therefore begins at SD000, and is in- 
effectual except to keep the drive 
runnir>g and in Uie proper read mode. 

Change the subroutine we put in at 
$9000 to qo to the modified next 
stage by typing: 

9M9:4C ii 37 
NoH type: 

%00G 

one last time. 

This time, when you hear the beep, 
the drive will step by itself. Vou're 
almost finished. 

Start listing the program at SiB03, 
looking for the next major jum out. 

You shouid find it at $1C25, and it 
is a jump to $1E54. Type: 

1C25:C 59 FF 
1^3G 

Now list beginning at $1E54. There 
is an imiediate junp to S9D84. List 
from $a)84. 

UWGUftGE CWO? 

At $9DE4 and S9DE7 are ^b indirect 
juaps, -Uirough $905E and $9D6C res- 
spectively. 

If you were to examine the code 
carefully, beginning at $9D84, yoi 
Houid find that the first indirect 
jump is taken by systons equipped 



with language cards (RlW cards), and 
the second for those without. 

Ito matter, the second indirect ad- 
dress will ultimately be jumped to 
whichever system you have. To find 
out what it is, t^i 

90E7:4C 59 FF 
9D34G 

IJien you hear the beep, type: 

905:. ^BD 

end the screen will display Uo« byte 
first) the address indirectly jimped 
to as $33D5. BMin listing from 
$3305, and you snould find the next 
JMP way doMi at $34BC. It goes to 
$00FD. Once again, t^: 

348C:4C 59 FF 
33D5G 

The disk drive will start, and the 
last se^Rsnt of the program will be 
loaded. If everything worked cor- 
rectly, you should hear a beep, the 
drive will stop, and the screen will 
be filled with garbage. 

^j^CRE THE P9SGm STffiTS 

Normally, the program would next 
jutp via the page zero location we 
lust chaiged at $34BC to the start of 
the rwlti-disk catalog main prograa- 
Type: 

00F[L 

to see whe-e Vhe start is. 

To niake it difficult, the software 
protectors have art one last daetacle 
in our path. $01* D takes an indirect 
June through page zero locations $4E 
and $4F to the sta-t of the program, 
Unfcrtunately, we can't just examine 
these locations to f irxJ out where the 
juit^ goes, because they get changed 
when a RESET cycle is executed. 



Not to worry, thouc^, because if 
you type: 

348a 

you can see that locations $4E and 
«F are set from $33C8 aid $3X1, 
respectively. Typing: 

33C0.3X1 

will thus divulge (low byte first) 
the starting ado-ess of the aain pro- 
gram as $1294. 

The proora* occiriies memory from 
$800-$18FF, $ai00=$5CFF, and $9000- 
$BFFF. (You find this out by scrol- 
ling ^Trough sionory to try and iden- 
tify progran stateiients and data, 
often a trial and error process. If 
you get too Mjch, no real harm is 
done, but too little and tte prog-am 
will not run. > 

All that remains to be done is to 
capttre the program under nornel DOS, 
and ^ie unlocking process will be 
complete. If you nave iftanaged to 
follow all this so far , ttie rest will 
be easy. 

fflUIHG THE HB10RY 

Warm booting a slave diskette will 
ova— write Memory locations $800-$SfF 
and $%00-$8FFF, but everythirw from 
$900-$96fF will be unaffected. Let's 
move the "lower" part of theprogram 
{$800-$180BJ q) and out of the way of 
the Soot, and put it adjacent to the 
i'„)^i»" papt_ ij(j y,^g ^ typing: 



"middle" 



3F00<^.18FFrt 

Similarly, move the "top" pa-t of 
the program down by typing: 
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REQUIREflENTS: 



The lOB program (from Issue 3 or 
IOB+ discussed elsewhere in 
this Update) 
fWFIN from the KK master di=*i 
Castle Wolfenstein by MUSE 
Two disk drives are required 
unless using lOB*, 

If^SIDE CftSTLE UOLFENSTEIN 

Castle Uolfenstein is an arcade/ 
adventure game using HiRes 9-aphics. 
You are an escaped prisoner of war,. 
trapped in a castie full of Nazi 
guards and SS troops. You must find 
the path to freedois and maybe a set 
of War Plans that are also in the 
castle . 

The game is enjoyable and yery 
addictive. Unfortunately it has one 
rather annoying routine - every time 
you rrn into a wall the screen 
flickers and a horrible noise issues 
forth from the speaker. 

After playirq ouite a few games, I 
became frus^atea by this sound and 
resolved to eliminate it. The first 
problem that I encountered was our 
old eiemy, software protection. 

THE LOCK 

Castie Wolfenstein is on a modified 
13-sector di^ that will boot on 13- 
or 16-sectcr AFflEs. Tlie only pro- 
tection used is to write even sector 
niBbers to the disk. This meaTS that 
the sectors step fcy two <ie. 0,2, 
4,&,B,10). He could solve Vrm first 
probieffi (i3-sector DOS) with Muffin. 
Muffin is a program that transfers 
i3-sector disks to l&-sector. How- 
ever, Muffin Will not haidie even 
numbered sectors. So, I decided to 
use ti^ lOB proy^fi, with 3 little 
help from Muffin. 

Within Muffin is an image of the 
13-sector RWTS. We will use this 
image when we inske our copy. The lOB 
program must be modified so that the 
13-sector DOS in Muiff in is called 
when ne read the Castle WolfaTstein 
disk, and the normal 16-sector DOS is 
called wheri we want to krite to our 
copy disk. 
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By Robb Can-field 




THE KEY 



1) Tixn on Iu'Olt- fiople di'nl bot^t from 
the DOS Master disk. 

2) Put a blank disk in -dr ive 2 and 
initialize the biart disk with the 
r-i^ie ^"llELLO": 

INIT -HELLO. 02 

3) 6 load the Sluffin p^'jqt'i3m: 

BLOW fliJFFTN.Di 

4> Entet- the [tianitor .^id add a siFort 
routirie Uiat sets ^jp. tl'ie RWTS call: 

C^L -151 

18F3:ti9 7d 2S ffi IE B8 «3 23 

1SFS:18 9i 2B 3S t".fi 

5) f?eturn to Applesoft: 

3006 

G) Load the lOB program or type it 
in. This will overwrite the first 
p^t of Muffin but does not affect 
the RWTS part. 

7) Charige the lOB program to call 
the i3-sector RWTS in Muffin by add- 
ing this line; 

63015 OATfl 169,3,160,6,32,0,16,% 

8) Ch^ige the loop in line 630ffi so 
that our new routine is poked into 
merory along with the regular data: 

63^0 FOR X = 768 TO 804: READ A : 
POKE X, A : NEXT 

3) Modify controller tti so that the 
approfs-iate DOS is called: 

1000 FOR TK=3 TO 34 

mS 10=797 :REM REfffl FROM A 13 

SECTOR DISK. 
1010 DU=i:CD=RD:GOSLB 5{i:G0SUB 85 
1815 10=768 :REM mill TO A 16 

SECTOf? DISK. 
1028 rw=2:CD=lJR:G0SUB 50:GOSUB 80 
10^ NEXT 

10) Change the DOS variable in line 
63835 so that only 13 sectors are 
read and written to the di^, instead 
of the normal 16: 



11) Delete line 128, (we don't want 
to initialize the disk) and change 
lirffi 130 to: 

130 A$="INSERT BL^K DISK IN 
DRIUE 2.":G0ai8 40 

12) Save this version of lOB (so 
that you won't have to retype it): 

SAUE lOB-CASTLE 

13) Insert your copy of CfGlil 
W{LFENS1EIN in ci-ive 1 (check that 
ttfe initialized disk is still in 
drive 2), and RUN the program. 

MODIFICATIONS TO CASTLE WOLFENSTEIN 

I located three different sound 
routines. T>ie locations to change 
are listed in figure 1 in the form of 




03 

OS 

CQ 

E 

CD 



Qistirf^ished by its ciirtular 
cor~e, the Cosmic Reactor 
powers your ^avity cannon. 
This reactor rixjst be protected 
at all costs. If its shields 
are trenched, the cjer-heated 
tore will e/pl',xJe, dtstrnyinq 
tl^ city. 
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pokes. To turn these routines ON or 
OFF follow these steps: 



1. BLOflD msj 

2. POKE XXXX.YY 

3. BSfWE §WOLF 



file to change 
desired change 
save the file 



Figure 1 






Sound Routine 


POKE 


ON 


OFF 


Grenades 
Gun Fire 
Hall Collision 
Screen Flicker 


4405 
4045 
4086 
2843 


48 
48 

1 
141 


16 

16 



96 



After m*inq ail ^Jour changes, re- 
ttrti to BASIC (3006} . Sa^^e the pro- 
gram by typing; 

^AUE ewOLF,AS810,LIi6EB 

Turning off these routires has no 
effect on the game other than elim- 
inating the ^cified sound. For 
example, tirninq off the wall noise 
does not turn off the screen flick- 
eruig, nor does it stop the Will's 
from moving, 

STRATEGIES 

ftiy game has it's DOs and DON'Ts, 
and Castle Holfensteifi is ra dif- 
ferent. When you are on the first 
level (a single room with no doors, 



only a stairway), wait for the guards 
to oe in a priBie position tsefore 
shooting, me guards will not attack 
you unless you Biove, attack them, or 
"Uiey tkjmp into you. Uhen you leaw a 
room, try to point the gun in a 
direction that gives the best chance 
of scoring a hit. This i^ually neans 
pointing the gun in the directitm you 
are moving, men entering a new room 
leave it immediately. This allows 
you to thir* ^xxjt Vhe situation and 
ready your gun appropriately. 

tf€N TO mx. 

Try to kill the guards when they 
are next to a doorway. This stops 
the other guards and SS from getting 
to you. The NAZIS's won't cross over 
fallen bodies. They can still fire 
at you, they just can't catch you. 
This can be used to create a safe 
place from which to throw grwisdes 
and such. 

SHOOTING ThffiOUGH UAUS 

Another handy technique is to shoot 
through walls. For so«e reason 
Castle Uolfenstein will let us fire 
through corners. This allows us to 
shoot a guard and not risk being 
caught. One can also open qp chests 
that are located in a ccrner. This 
sawes time and avoids umecessary 
ri^s. 



ADWHCED PLAYING TECmiQUES 

The following techniques may be 
considered cheating by the less en- 
lightened, but more open-minded 
individuals will readily see we are 
only t^ing advantage of itie program 
and its lifsitatims. 

LIFE BEYOND DEATH 

Normally when the RESET key is 
pressed Castle Uolfenstein saves the 
current game. Me can change this so 
that instead of saving the gane, we 
exit back to Af^lesoft. Once there, 
we can re-boot and resune the game 
one room back. There is a reset 
routine in both gMT aid ©JOLF, but 
we are only concerned with the 
routine in IWCIF for the swment. I 
have listed the routine here so that 
it can be easily nodified. A com- 
plete ei^lanation of how the reset 
vector works can be found on pages 36 
and 37 of the APPLE H Reference 
hanuai. 

1187-A9 C7 IDA #$C7 Set the 
1189-80 F2 93 STA $83F2 reset vector 
U8C-A9 IE LDA ttSlE so that it 
iieE-8D F3 03 STA $g3F3 jums to 1EC7 
1191-49 A5 EOR »SA5 Set the power 
1193-eD F4 03 STA S03F4 tjp byte 

I wanted the APPLE to re-boot the 
disk when I pressed the RESET key. To 
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do this, type: 

BLOADeWOLF 

Enter tbe monitor and t^ the 
following line; 

1191 :EA EA 

Return to Applesoft (3D0G) and save 

BSAUE eW0LF,ft$818.L$16EB 

NOTE: The ESC key (k*iich saves the 
game) will still operate normally. 

FOR THE AGGRESSIUE PLflVER 

Castle Wolfenstein was witten so 
that every roan is stored on a unique 
sector. When the game first starts 
the track/sector list of CASTLE is 
read and stored in memory. The first 
sector corttains the variables. Every 
time you enter a new room, the old 
room is saved and the new wie is read 
in. This means that any room modi- 
fications you hawe made (grenades are 
handy for this) will be saved. It 
also aiioHS us to go back one room if 
we just happen to make a fatal error. 
Also, if you hawe a disk editing pro- 
gram, such as DISKEDIT, you can give 
yotrseif 25^ bullets and grenades. 

THE RIGHT SECTOR 

First we have to find vi^&re this 
sector iSi. Read track $11, sector 
SC. This is the first sector of the 
catalog for Castle Molfenstein. Look 
for the program 'WCKUP (some copies 
may have the name BACKUP). If it is 
not on this sector, try sector $0B of 
the same track. If you still haven't 
found it, you are doing something 
wrong. 

ftfter locating the name, back up 3 
tytes to find the Track/Sector list, 
(now this information is stored is 
e)9lained on pages 129-131 of the DOS 
llanual). Read this sector. Look at 
the 13th byte {S0C). The first 
nunber is the track where the first 
sector of the progr^ is located, the 
next byte is the sector. Read this 
tr ack /sector . You now have the first 
sector of the program in semory ready 
to be modified. 

I foax) the file nache "BACKUP on 
track $11, sector $0B, The third 
twte back from the name was $14 and 
tne second byte was SBC, so I read 
track J 14, sector $aC. Afta- reading 
this sector. I looked at the 13th 
($aC) b/te. It was $20 and the next 
byte was $0B. This meant that the 
first sector of the progran was 
located on track $20, sector $ffl, 

SOt€ CIJSTOH CHflUGES 

Once the sector is in memory, Biove 
to the proper location »id change the 



byte to the desired value (ise the 
comnaid to move the cursor if you are 
using DISKEDIT). The table in figure 
2 shows the item, the location in the 
sector and the value to place there. 
All values are in HEX. 

IE. To get 2S5 bulls't.'5, (tiove tlie 
fBompt toiocatiof! $47 and change the 
value there to $¥? . 

Figure 2 



Desired Item 


Location 


yalue 


Bullets 


$47 


&-$FF 


Grenades 


$48 


fr-SfF 


Uhiform 


$49 


$01 


Bullet-Proof Uest 


$4A 


$01 


Har plans 


$6C 


$01 


Ra* 


SGD 


see text 


Room tt 


sm 


see text 


Resurrection 


S6F 


$00 


X ttiance of Hit 


$4B 


ft-$FF 


X Chance of Recog. 


$4D 


&-$FF 



NOTE: Orange both -BACKUP and tASTLE 
(also known as CASTLE) to be sere the 
iBodificatiore stick. These two files 
are used alternately at different 
levels of play. 

UflCH ROOM ARE YfflJ IN? 

The map in fiare 3 ^x3ws the lay- 
out of the castle. Each room has a 
nuiber. This is the nunter to use if 
you need to cl'ange rooes, 

NOTE: You may end up in a wall if 
you piay with the room nurtaer. If 
this happens, you will have to try 
another roan or change yoir position 
m the room. Bytes *43-$45 hawe 
something to do with your position 
within tFie room. 

Yoj" rank can be changed to a hi^- 
er level which will cause the game to 
be much harder and more interesting. 
Change the rark byte as follows: 



$10 Private 
$33 Corporal 
$50 Sergeant 
$70 Lieuterrant 



$90 Captain 
$A0 Colonel 
$C0 General 
$E0 Field Marshal 



RESIISRECTIW 

If you happeri tn press REt;ET too 
late, your asme can still be 
retri.eve(^ if yru stop it. taefrjre 
piayiriq again'. Put a iW in tyte $&F 
jn the" sector. 

GIUINC-, IT YOUR REST SHOT 

Byte t4B deter- ^!iintl^9 ths purcent 
■chaiT.ii of your .achieving a kill. The 
higher the nuraher (Sf'F is gre.iteh^t) , 
rJy^ tetter yr/jr chaiX.^s, 

I 't1 NOT REfiLLV HERE 

Byte $4D determines the percent 



chance of your being caught with $FF 
being the greatest percent chance of 
being recognized. 

SOME HBBR GLITCHES 

1) When you have more than 10 bul- 
lets, the display will still show you 
as having only ten bullets. This 
value will decrenent orKe for each 
^t fired. Do not get bullets from 
a box. If you do, the program will 
r^lace the actual number of bullets 
you have with 10. 



^) The grenade value ^Dpi^arS a?- a 
letter or syiDboi. However, it still 
decreffients by c^-e for eaci": 
^hat vou throw. 



greriade 



Neither of tiie above problems af- 
fects the play of the game, except to 
give you a lot of bullets and 
^er^ades. 

ESCWING CASTLE WOLFENSTEIN 



The path out of Castle Uolfenstein 
is always the saine. The contents of 
each room are randomized for each new 
game. Once this map is metnorized it 
becoti»es easier to escape the Castle. 
Unfortunately, the plans are not 
guaranteed to be on the way out. My 
favorite tactic is to run fcr the 
exit, zapping or dodging as required 
aid opening all chests I f irKl alcsng 
the way. If I haven't fomd the 




"as 
m 



A single Stellar ',>orte^ can 
sjtteriy obUterate a 
cityscape. Fortunitely t.hey -i."; 
not e^plctrle iiTKfied lately 'jpor^ 
appear-.ince. T*^' ^ost 'Xou to 
critical mass before they will 
explode. t-rfTen about to explod*? 
tf"iey will begin to "tick'' aitd 
change colors. 
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ROOM AND NUMBER 



* STAIRWAY UP 

♦ STAIRWAY DOWN 
■ ESCAPE ROUTE 

S OTHER ROUTES 

i: 

Figure 3 
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EXIT 



plans by the tuoe I reach the last 
room, I backtrack anct search until I 
find theiti, 

GOOD LUCK ttffl HAUE FUN!! 



M/snced Playing Techniques 

The APT prog'aft is an alternate 
aethod to changing the variables in 
Castle tJolfenstein. Be sire to read 
"IHSIK CASTLE MOLFENSTEIM" before 
using this program. 

Enter the prog^as and save it to 
disk. 

Using The Program 

Insert yoir Castle Wolfenstein disk 
(unprotected) and run the program. 
You will first be asked for the file 
you wish to alter. 

REMEMBER; change both BACKUP and 
CASTLE in the same way to insire that 
the variables are indeed changed (or 
'BACiajP and tlASTLE if these are on 
your disk instead). 

The default answer is Yes. EX will 
return you to the main menu, or if 
pressed from the main menu will 
terminate the program. There is one 
additional choice provided, FIX BAD 
FILE. If when you are playing Castle 
Wolfenstein, the program freezes, try 
this option. It should restore the 
game and eliminate all SS nho are 
actively pursuing you. 



100 TEXT : HOME : NORWL : HIMEM: 

16380 
11^ WTA 32,227, 3, ?6, 217. 3 
120 FOR X = 8 TO 5; READ V: POKE 

768 + X,Y: NEXT 
130 D$ = Crta (13) + CHR$ (4) 
140 INUERSE : VTAB 2: HTAB 5: PRINT 

■*A.P,T. FOR CASTtE UOLFENSTEIN" : 

NOWW. 
150 UTAB 7: HTAB 5: PRINT 

"D CHrt«E CASTLE": HTAB 5: 

PRM "2> CHANGE BACKUP" 
160 PRINT : HTAB 5: PRINT 

"3) CHfW(X tASTLE": HTAB 5: 

PRINT "4) OmSE "BACKUP" 
170 POKE 216,01 UTAB 13: HTAB 10: 

PRINT "UHICHONE (1-4) " 

CHR$(7);: GET AS 
180 IF A$ = CHRS (27) Th€N HOME : 

PRINT "PROGRAM TERTtlNATED": EW 
190 IF A$ < "1" OR A$ > "4" ThCN 140 
200 FI$ = "CASTLE": IF A$ = "2" OR 

A$ = "4" 1>€N FI$ = "BACKUP" 
210 IF A$ > "2" THEN FI$ = "-"' * FI$ 
220 ONERR GQIQ m 
230 PRM D$"UERIFY"FI$: POKE 2^,0: 

GOSlfi 910 
240 fll = reEK (TB)* PEEK (TB t 1) " 

250 POKE TR, PEEK (Bl + 12): POKE 

SE, PEEK (fll + 13) 
260 POKE CtMD.l: POKE BU,0: POKE BU 

♦ 1,64: POKE ^01,0: CfLl 766 
2?B IF PEEK (mo > 15 THEN 740 
280 FI$ = "MAXIMUM (SENAffiS": (»SUB 

Sa : IF B THEN POKE DB + 72,255 



290 FI$ = "MAXIMUM BUaETS": GOSUB 

920: IF B THEN POKE DB + 71,255 
300 FI$ = "A UNFORM": GOSUB 920: F 

B THEN POKE DG + 73.1 
310 FI$ = "A BULLET fWOF WEST": 

GOSUB 320: IF B THEN POKE DB + 

?4.1 
320 FI$ = "Th€ WAR PLANS": GOSUB 920 

: IF B THEN POKE H + 1^,1 
330 IF PEEK {DB + ill) = THEN 350 
340 FI$ = "TO BE F^ajRECTED": (MSUB 

920 ; IF B THEN POKE DB + 111,0 
350 HOME 
^ FIJ = "TO CHAtJGE YOUR R*IK": 

GOSUB 928: IF NOT B THEN 450 
3?0 PRINT : PRINT"CURREWT R*IK IS ": 

INT (( PEEK (DB + 109) / 16 + 

i) / 2) 
380 PRINT : POKE WL,5: PRINT : PRINT 

"D PRIUATE": PRINT 

"2) CORPORAL" 
390 PRfflT "3) ^raSE«4T": PRINT 

"4) LIEUTEhWNT": PRINT 

■S) OV'TAIN" 
400 PRINT "6) COLONEL": PRM 

"7) GENERAL": PRINT 

'■8) FIELD MARSHAL" 
410 PRINT : PRINT "miCH ONE (1-B) " 

;: GET A$ 
420 POKE H,0:A = WAL (AS) 
430 ff A < 1 OR A > 8 THBJ PRM ; 

PRINT : PRDJT 

"MAINTAINING OLD RANK": FOR X = 

1 TO 500: NEXT : GOTO 450 
440 POKE DB + 109,(2 * A - 1) * 16 
iSD HOME 
460 FI$ = "TO CHANGE ROOMS": GOSUB 

920: IF NOT B THEN 510 
470 PRINT: PRINT "CURRENTLY IN ROOM " 

: PEEK (DB + 64) 
480 PRINT : INPUT 

"ENTB? ROOM HMUi (1-60) ";A$ 
490 B = yAL (A$): F B < 1 OR B > 

50 THEN PRINT : PRINT 

'tIAINTAINING OLD ROOM": FOR X = 

1 TO 500: NEXT : GOTO 510 
500 POKE DB + &4,B 
510 i¥M. 
5^ FII = "TO CHANGE PERCENT CHANCE 

OF ffi:HIEUI(« A HIT": GOSUB 920 
530 IF NOT B THEN Gffi 
540 PRINT: PRIKT"CtJRRDJT CHANd IS " 

; : PRINT INT ( PEEK (DB 4 75) / 

255 • 100) ;"r 
560 PRim : BPUT 

"ENTER PERCENT tWNTED ";AE 
570 IF A$ = "" THEN 600 
580 B = U«. (AS); IF 8 < OR 8 > 

100 THEN (m 
590 POKE m ^ 75,255 * B / 100 
600 HOME 
610 FI$ = "TO OWJGE PERCEKT CHAN(I 

OF HiING RECOGhilZED": GOSUB 920: 
620 IF mi B THEN 680 
630 PRINT :PRINT"ajRf^NT OtfWCE IS "* 

INT ( PEEK (DB + 77) / 255) 
640 PRINT : INPUT 

"CHAN(S ra«:ENT CHWCE TO ";A$ 
650 IF fll = "" THEN 680 
660 B = l,W. (AS): IF B < OR 8 > 

100 TFCN 680 
670 POKE DB + 77,255 * B / 100 
680 HOME 
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the REPLAY card 



Texas Ronch ond Shoreline Systems 
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I am a beginning corrmterist. Be- 
cause of this irrevocable and often 
frustrating fact, I was asked by the 
fxilisher of HardCore to write a 
reyiew of the Replay card, from Texas 
Ranch and Shoreline Systems (TRftSH), 
geared to ^le interests of other 
beginners nho have found the going a 
little rough. 

Hhat You Get 

R^lay is a package which includes 
the Replay card itself, a utility 
disk, and a 57-paQe manual. The card 
enables the user to captire whatever 
prog^ani is in lemory at the time the 
copy switch is flipped. The copy is 
Hritten to disk autranatically in a 
non-^le coapatible format. The 
utilities on the accompanyinq disk 
allow the copied pro9"an to be 
analyzed and edited, and packed into 
a nordai DOS binary file. 

Single Load Prog" am 

In order for a program to be copy- 
able by ^le Rasla^ card, it must be 
total load. This is a program hiiich 
loads intto memory h^en the disk is 
booted and doesn't r»ed to access the 
disk again. Since mogt gaaes are 
total load, Replay has some ^>ecial 
advantages for gawe players. If you 
would like to avoid the lower ^ill 
levels, you can play a game ip to 
whatever level you like and niake a 
copy starting at that point. Uhen 
the copy disk is booted, game play 
Mill sta't at the hi^ner level. 

Using The Card 

The Replay card will copy absolute- 
ly any program executing in memory in 
15 seconds. The card can be inserted 
in any slot, except slot 6 where the 
disk I/O card must be. The other 
requirement is that slot either be 
empty or have the Replay card in it. 
(no RfiH or ROM card can be present.) 

Copies are made by first booting 
the program to be dLpiicated. l*ien 
loading is conpleted, the disk is re- 
moved and a blari< di^ is inserted in 
the drive. The program in memory is 
frozen by fiif»ifig a switch on the 
R^lay card (tne top Kiust he left off 
of the computer in orda" to reach the 
switch). A profit warns that a copy 
is about to be made and the user is 
instructed to press any key to start 
the copying process. Remeittier to put 
a blank disk in the drive before you 
press a key. When a copy is coipiet- 
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ed, the words "Copy Made" appear on 
the monitor. 

Running The Copy 

Replay copies a prog-am in a non- 
standard fwrnat which uses 18 sectors 
per track. A R^lay copy will not 
boot Hith normal Dffi. The R^lay 
card must be in the computer. The 
copy is run by calling the card from 
BftSiC or from the monitor. Two ques- 
tions have to be answered before the 
program will rui: 

1. Ifriether to execute the prograsi or 
just load it 

2. Itiich text, LoRes, or HiRes page 
to display (either page 1 or 21 

The instructions will help to 
answer these questions. If the wrong 
page is selected, sinply reboot. 

Changing the copy 

The editor utility allows the ct»y 
disk to be analyzed and edited. The 
edit buffer will hold up to 13 tracks 
at one tine. 

The contents of the buffer can be 
disassembled, altered, and written 
back to the disk. 

Converting to Norsal DOS 

The packer is used in converting 
the Replay copy froo its nonstandard 
format into a DOS 3.3 co«catible file 
so it can be saved on a standard DOS 
disk. Having the copy on a standard 
DOS disk is an advantage because it 
aUoHS more than one file to be saved 
on a disk. 

The first step is to pack a binary 
file. The process involves keying 
the parts of the [rog*am which are 
vital and throwing out the ones that 
aren't. This is necessary because the 
longest file that can be written to a 
DOS 3.3 disk is $80 pages. A Replay 
disk is fC0 pages, so it can't be 
converted as one long file. 

fin cption is included t^ich will 
pack a binary file automatically with 
the aid of a "command" file that con- 
tains the appropriate infornation. 

Several commar^J files are included 
on the utility disk . Each file is 
^Jecific fcr a certain prolan. 




DocLPentation 



Like most first-time documentation, 
the Replay manual contains ntany typo- 
graphical errors which can often be 
confusing, especially if the user is 
a beginner and can't second-guess the 
author. Gena-ally faking, the 
editor and packer sections of ttie 
manual make assumptions aiined at the 
experienced user, ►^ile the Replay 
card section is easy enough for the 
beginner. I found the utility disk 
meoj especially clear and helpful. It 
contains a brief expiination of each 
featire, which can serve to augnmt 
the manual and remind the user of 
program functions. 

How it Rates 

The card itself is easy to use. The 
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When the bombs and rays str ike 
n^ed earth, they cr«>ate i^iuge 
craters which can dest'-oy '/oir 
cannons. Craters can be fiile-j 
by successively sacrificing 
cannons Lntil the craters -^re 
filled or by rebuilding over 
them. 
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impcrtance of timing the co«puter 
off before inserting the card ^vxjid 
be emphasized niore clearly in the 
docuffientation. It would also have 
helped for the instuctions to point 
out *^ien to remove the original disk 
^id insert a blank one. Aside from 
this, the documentation concerning 
the use of the card is fairly easy to 
understand. 

The directioris given for the edita" 
ossune that the user knows what an 
editor is for and what to do with it. 
For example, the user is not told to 
remove tre utility disk with the 
editor on it and insert the disk that 
the Replay copy is on. Host people 
will figure out that this needs to be 
done, but it would have been more 
helpful if this had been included in 
the documentation, along with when it 
should be done. 

The packer utility was particularly 
difficult from the point of view of a 
beginrer. fi ruachine lanqgage back- 
yound is needed to be able to recog- 
nize sections of code which are valid 
and other sections t^iich can be left 
out. Exatrples of differ«it kinds of 
code are provided, but to a begimer 
it is still a aystery. 

The command files are handy for be- 
giming and eitperienced users. In 
order to add your own command files, 



some machine language experience is 
again required. You aust first pack 
the progrsjs successfully to have the 
correct information to be sawed in 
the comnsnd file. 



Ccnclusion 

The card «eets all of the claiiBS of 
the manufactirer. It can be very 
useful to botfi the businessman and 



CASTLE WDLFENSTEIN 
Continued From Page 12 



690 FB = "TO FIX ft BAD FILE": GOSUB 

920: IF NOT B THEN 710 
?Ta0 FOR X = 110 TO 256: POKE DB + X 

,0: fffXT : FW X = 76 TO lfi6: 

POKE DB + X,0: NEXT 
710 HOME : UTAB 12: HTAB 16: PR3W 

"HRITTING" 
720 POKE OVB ,2: POIS yOL,0: CALL 

768: NOTE 
730 IF PEEK (EfiR) < 16 THEN 140 
740 PRINT CHRS (7) 

"WARNING, DOS EiTOR" 
750 E = reEK <KR> 
760 IF E = 16 THEN FKENT 

"WRITE PROTECTED (RBIOyE TAB)" 
770 IF E = 64 MN PRINT 

"DRIUE ERROR (170)" 
780 IF E < > 10 AND E < > 40 Tf€N 

PRINT "UNUSUft D?ROR, CODE = ";E 
790 TEXT 
800 Etc 

810 FT = 465e2:SL = 465e3:DR = 46584 
820 TR = 4?884:SE = 47885 
830 NS = -^574:13 = 46537 



840 UL = 32:UW = 33:UT = 34 

850 CmD = 47092:EW! = 47093 

860 UOL = 47063 

870 BU = 47ffi8 

680 DS = 16384 

890 H»E : irWERSE : PRINT 

"FILE KWE:"; 
900 NOmAL : PRIKT " ";F1$ 
910 POKE WT,5: UTAB 6: POKE ERR,0: 

RETURN 
920 B = 0; PRM "DO YOU WNT ";: 

POKE WL,12: INUERSE : PRINT 

FI(;: HORHAL : PRINT " (Y/N> "; 

ar AS 
930 POKE UL 
940 IF Af =' (H?$ (27) T>€N POP :■ 

GOTO 140 
950 IF AS = CHR$ (13) Th€N PRBJT 

fETU^ 
960 PRINT A$ 

979 F A$ = "V" THDJ B = 1 

980 fSTURN 



REPLPY 



• COPIES TOTAL LOAD PROGRAMS 
•DISK FORMATING IRRELEVANT 
■ANALYZE PROGRAMS 



<COPY IN JUST 15 SECONDS 
'PROGRAM RESTART IN 10 
•AUTOMATIC PACKING FILES 



REPLAY is an interface card with 
software In eprom that plugs Into 
one of the APPLE alots. REPLAY does 
not copy a disk, rather It coplei 
a program executing in raeinoty. The 
term total load describes a progran 
that fully loads into nemory to 
execute . 

The original disk formating ts not 
important. If the program will boot 
it is possible to make a backup copy 
that Hill execute in 10 seconds. 

Now game players can save and restart 
games at a high level. The user plays 
the game to a level and copies it 
-with REPLAY. Then simply restart the 
program at that level by running the 
copy. 



APPLE is a trademark for Apple Computer, 
Incorporated. 



The copied program can be executed 
several different ways. The card 
copies with an editor utility that 
operates under DOS 3.3. This allows 
editing of the copy disk. A second 
utility Is used to pack the copy disk 
and put it into an executable DOS 3.3 
binary file. There are parameter lists 
for packing popular games and programs 
included with the card. REPLAY is able 
to store two copied programs of 48k 
length on a DOS 3.3 disk. Either file 
can be executed by a program on that disk. 

COST! $129.95 Fully Assembled Card 
MASTERCARD/VISA Accepted 
Plus 53.00 Shipping and Handling 
(Texas Residents Add 51 Sales Tax) 
Outside W.S. Add S5.00 Air Parcel Post 

TO ORDER: TEXAS RANCH & SHORELINE SYSTEMS 
P.O. BOX ZO 
5712 MANOR RD. 
AUSTIN, TX 78723 (512) 926-4527 
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the game player. For the business- 
aan, it will provide a reliable 
backup and a quick method of loadirg 
a large program (for example, a 
calculation-type prolan and a favor- 



ite tenplate could be saved to- 
gether). In addition, the game 
player will find that the R^lay card 
can open up a whole new range of 
player tactics. 
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NOT COPY-PROTECTED 



lOB DATA STATEMENTS 

Lirif.; (18 gets tfie track d^ts ^nd 
line 78 mis it into the RUTS. 

Line 110 sets trie maxiinura riuinber of 
sectors to c !jpy for ijach track aii6 
changes <a twtc' in the rajT5 sc; that it 
will ignore rj-it=cksums and end marks. 

i..ine"l20 will INITifiUze the t^gtn 
disk. 

Lire 1000 is chinqed to igi'nxe tl'e 
DCS tracks. t3-2) 

Line 1010 rhariges the ln)xjt,/Output 
CALL location and READs m 3 track. 

Line IBI^ lool-;s far trie '<-jTQC track 
and sets tfie directory link to point 
to track 14. sector 4. This is 
because the protected disk has moved 
trie true directory friM it's norm.ji 
location at track 17, sector C, 

Line 1022 sets tfws I/'O CAi.L back to 
'^mai DOS aid writes the track info. 



Continued From Page 4 

Line ijmi has been charN^SiJ to POKE 
tlie a;ldLtioriai bytf^s in line S30i0 
into parje 3 of isiatiory. U'lis is the- 
niachirie'ldrauaQe subroutine nLiich 
calls the .^ptorriate RUTS. 

Line fa^35 BLOt'^Ds the 13 sector 
RWTS. 

Lines f.JlKii ^xl on .^e tlie dscinal 
t>,'tes that rtfLiSt be ooKed ii^to the D 
sector fiWTS m order to READ ttie 
protected disk. 

Use FID to transfet the files f.''or!i 
the i.xipr otected version of Ultima to 
another di^. so that the UTOC aid 
directory will be on tkie correct 
track. 

Trie hello name on the IJUimd disk 
IS "IXTIW", 



BOOT CODE TRACING 
Continued From Page 8 



Add the foliowinq relocation 
routine, so that rfien the program is 
BRUN everything will be put back in 
the proper place: 



3ED0:00 IM A9 5D BS 3D A9 7F 
3ED8:85 3F A3 9D 65 43 20 F3 
3EEa;3E AS 3F 85 3D A9 4F 85 
3EE8:3F A9 98 85 43 28 F3 3E 
3EF0:4C 94 12 A0 FF 84 3£ C8 
3£F8:84 3C 84 42 20 2C FE 68 

The source code for this routine 
looks like: 



3ED2-A9 
3ED4-85 
3ED6-A3 
3ED8-85 
3EDfr-A9 
aX-85 
3EDE-20 
2E1-A9 
3EE3-85 
3EE5-A9 
3EE7-85 
3EE9-A9 
aEEB-85 
3EED-20 
SF0-4C 
3EF3-«i 
275-84 
3EF7-C8 
SF8-84 
3EFA-84 
3EFC-20 
3EFF-60 



5D 

m 

7¥ 

3F 

90 

43 

F3 31 

3F 

3D 

4F 

3F 



X 
42 
2C FE 



IDA tt$5D 
STA $3) 
IDA tt$7F 
STA $3F 
LDA S$90 
STA $43 
JSR $3EF3 
LDA tt$3f 
STA $30 
LDA »$4F 
STA $3F 
LDA ttS08 
STA $43 
JSR $3EF3 
Jf $1294 
LDY tt$FF 
STY $3£ 
INV 

STY $X 
STY $42 
JSR $FE2C 
RTS 



Set up 
address 
data to 
move top 
part of 



;all move. 
Do it again 
for the 
bottom 
part of the 
proyam. 

Call move 
Run FVograni 
Get things 
ready 
before 
calling the 
monitor 
move 
routine. 



THE FINAL TEST 

Finally, remove the protected disk 
from the drive and replace it with a 
ncrmai DOS (slave) disk. Harm Boot 
it b/ typing: 

6 CTa-P 

Do not type "CTRL-P". just hold the 
CTRL key dowi and press P" then re- 
lease tne CTRL key and pre^ 
"RETU*J". 

Vhsn the Boot is co«6plete, type: 

BSAUE m)C,A$3ED2,L$412E 

You now have an inlocked program 
that will BRWJ nwmally, or it can be 
customized as you see fit. 

Try this procedure nith your other 
"one-shot" load progrsnts. Vou will 
probably be surprised at how often it 
works, with a little sleuthing. That 
is where the perseverance part comes 
in. 

Page zero locations changed by 
RESET: 

$^-$2B 

$31 

$33-$3F 

$40-$49 

$4E-$4F 



HULLS 



A Hi-Res Arcade style qitt 

Remm 48K ttith RQH Applesoft, 
no 



mo qaie ptdilles. 



HOW 
MANY 
NIGHTS 
CAN 
YOU 
SURVIVE ? 



Play -alORB, or get heip (ttto can 
hai up against the invaders!) 

The hiph score at each of the 9 
ikill levels is saved to dish 

Keyboard coiiands let you: 
Rebuild the city-piex. 
Fill in craters. 
Repair buildings. 
Restore a daaaged reactor. 
Put gaae into pause'. 
Turn sound on or off. 
Change paddles. 



Detailed 22 page booklet on gaie 
is included. 

Written by Bev R, Haight. 
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BACK 
ISSUES 

ARE 
g vIVMLKBLE 



Issues #1 ini 2 (and SDon, 
♦-3J are back-issues and, tihile 
thev last, can be purchased at 
the saiple copy rate; 

$5 each U.S. only 
t3 each foreign orders 



UPDATES, TOO 

Aleo, ba:k aqaiti becausi^ 
of popular deffisnii (by those 
who' want a coffipiete collec- 
ttcm cif HARDCQf?E Canputing) 
tiatk issues of the Uptista-j 
are also a'-'silable: 

$3 each U.S. only 
tj each foreign orders 

L'.S.. Funds only 
No credit cards 

No COD'S 

No Ptaie Orders 
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HOT TIP: A read^ called and left this message: "Charoe byte $B68C in DOS to C 
arid speed up file SAIE times by 12%." This change Hill stop DOS from doirig an 
automatic verify on e>/ery sector it Hrites. So, decreased SftUE times for a de- 
creased reliability, the choice is ip to you. 




Due to last minute changes in the 

contents of I^sue tt3, the foUowiiiQ 
corrections shixiid be noted: 

Page 1 - Table of Conterits - UISI- 
Cffi_C: "Job Costing" appears on page 
61 instead of pag*2 4i. "HGR: Huey's 
Hi-Re? Corner" appea-s on page 43 
instead of page 42. 

Page 33 - "Sleruj'^ - Ttie machirie lan- 
guage listing in the first column is 
correct, bjt to make lire identical 
to the sample line chars^; t^-ie two 
FF'S in line 828 to B2 84 by typing: 
82C:B2 94 

*en setting t^-ft "End of Program" 
counter . make sure you type a space 
betweei-s the 3Pi and 08. 



"Zepfivr Hais" - Insert 



Page 40 
line" 200: 



200 ROT= 8;a = XUFOJifZ) * 7:Y% - 
YlfOX{2): IF YX = THFW RETURN 



Page ?2 - "Bugs" - This section 
should read: 

For those of you who have thi:> mag- 
azine version Of TEXT INUWERS, maSe 
this cha-ige to line 970 and it will 
stop crashing after you wipe out the 
first row of" invaders. 

970 I^*JftDERS$(l) = LEFTS (INUADERSS 
(i), Rpm.) t TEHPSS + MIDS 
(INWDERSS (ftft), R(=lN% +2) 

Also, for those with Dis^Uiew 1.1, 
ths'e is a bug in tine &90 of the 
"print routine". Please chanqe iir« 
h% to read: 

690 PI = K¥%: RETIRH 

And finaiiy we have a correction in 
the disk version tas o^sed to the 
HardCore issue tt2 version! of Text 
Invaders. There is a color {;) 
niissinq between tfie GOSUD 1530 and 
the HES;t fi in tijie &0. 



Page 46 - "Uector Q-^ics' 
210 should real: 

210 IF ft<0 THEN 250 



Line 



